Yamato Transport

Postal & parcel Japankuronekoyamato.co.jpRank 279 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
4
2 reported or listed · 2 on phishing hosts
Registered lookalikes
16
2 listed by a source or an address list
Official domains
2
verified from Yamato Transport's own sites and records

Certificate findings for Yamato Transport

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Yamato Transport's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 8 findings, grouped by hostname

  1. pseit.kuronekoyamato.jp.ehsyt.top CN · AS24429 · Zhejiang Taobao Network Co.…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 d ago
    DetailsHide
    Hostname
    pseit.kuronekoyamato.jp.ehsyt.top
    First seen
    2026-11-03 10:17 UTC
    First published
    2026-11-03 11:04 UTC
    DNS
    Resolves · checked 2026-11-04 11:13 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 163.181.214.15.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 163.181.214.15
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 09:13 UTC to 2027-02-01 09:13 UTC
    Logged 2026-11-03 10:11 UTC in Let's Encrypt Sycamore2027h1, entry 919,641,016
    SHA-256 8ef5c8d99a8767fd7f4c851124acb63276f97c9a0ae68f8be22d73da08d613e8
    Public key SHA-256 de01d4a95ab585e9621a24f74503eb9868878516934f8402f27977b2b711a973
    Brand
    Yamato Transport
    Addresses
    163.181.214.15 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd
    Domain
    ehsyt.top
    Registered
    2026-11-02 · 上海美橙科技信息发展有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  2. hidden-valley-mist-2a7d5f.site US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating ヤマト運輸MX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    hidden-valley-mist-2a7d5f.site
    First seen
    2026-11-02 09:31 UTC
    First published
    2026-11-02 09:39 UTC
    Listing
    JPCERT/CC confirmed it 2026-09-11 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:43 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-02 08:25 UTC to 2027-01-31 09:23 UTC
    Logged 2026-11-02 09:25 UTC in IPng Networks Halloumi2027h1, entry 337,063,843
    SHA-256 a8d961be0823a52ebe195eec5c5051ae6721d2c9213684cb8701fd7352f0686f
    Public key SHA-256 19c1df88d152d13bee18641e7f50db2286eee0c0ae07b66b0667bb7799dfd2e7
    Brand
    Yamato Transport
    Addresses
    104.21.29.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.29.131, 172.67.149.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    hidden-valley-mist-2a7d5f.site
    Registered
    2026-09-04 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  3. app.kuronekoyamato.co.jp.bsety.top CN · AS24429 · Zhejiang Taobao Network Co.…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    app.kuronekoyamato.co.jp.bsety.top
    First seen
    2026-11-01 15:52 UTC
    First published
    2026-11-01 16:25 UTC
    DNS
    Not resolving · checked 2026-11-05 08:47 UTC
    Checks
    Overdue since 2026-11-04 16:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 163.181.214.13.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 163.181.214.13
    Certificate
    Issued by YR1
    Valid 2026-11-01 14:51 UTC to 2027-01-30 14:51 UTC
    Logged 2026-11-01 15:50 UTC in Google ParcelYard2027h1, entry 557,394,865
    SHA-256 86bfb311f009d817ed988ce018adf2c26b980c79538272618c9a134cdf7a27ed
    Public key SHA-256 f6ec3acc0dabb089ecb7b84305abe849a1923bbc655a1e17d9539801c00e9e1e
    Brand
    Yamato Transport
    Addresses
    163.181.214.13 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd
    Domain
    bsety.top
    Registered
    2026-10-31 · 上海美橙科技信息发展有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  4. www.puritycleaners.com US · AS16509 · Amazon.com, Inc.2 addresses
    ListedAmazon Web ServicesListed by JPCERT/CC as imitating ヤマト運輸MX absentSPF missingDMARC missingRegistered 6 d ago
    DetailsHide
    Hostname
    www.puritycleaners.com
    First seen
    2026-10-30 20:51 UTC
    First published
    2026-10-30 21:47 UTC
    Listing
    JPCERT/CC confirmed it 2026-07-23 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 21:58 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-30 19:49 UTC to 2027-01-28 19:49 UTC
    Logged 2026-10-30 20:48 UTC in Google PlumbersArms2027h1, entry 529,087,357
    SHA-256 7a88948ae0baea2cfa423a057934d648b7e8aea58bf288ac9cb6d3ddb5b1ee4c
    Public key SHA-256 26460b4a8e68223a1539f29d08ab75df0b1b30b07c32d88d4d8c3364528380d9
    Brand
    Yamato Transport
    Addresses
    44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
    Domain
    puritycleaners.com
    Registered
    2026-10-30 · Spaceship, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  5. app.kuronekoyamato.co.jp.epsru.top CN · AS24429 · Zhejiang Taobao Network Co.…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    app.kuronekoyamato.co.jp.epsru.top
    First seen
    2026-10-29 05:41 UTC
    First published
    2026-10-29 06:44 UTC
    DNS
    Resolves · checked 2026-11-05 06:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 163.181.214.16.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 163.181.214.16
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-29 04:41 UTC to 2027-01-27 04:41 UTC
    Logged 2026-10-29 05:39 UTC in Google PlumbersArms2027h1, entry 501,219,282
    SHA-256 b8a1efd4c847b222b1fafa593e3ec254f4fed29d02a03412cee67b56c1508820
    Public key SHA-256 94f6d657761aa3eb2b65e4eaf1c319e518b7919fd5e750ddf7f4acefacad0a98
    Brand
    Yamato Transport
    Addresses
    163.181.214.16 · China · AS24429 Taobao - Zhejiang Taobao Network Co.,Ltd
    Domain
    epsru.top
    Registered
    2026-10-29 · 上海美橙科技信息发展有限公司
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  6. 711bdur.bond US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating ヤマト運輸MX presentSPF ~allDMARC policy noneRegistered 4 mo ago
    DetailsHide
    Hostname
    711bdur.bond
    First seen
    2026-10-28 22:31 UTC
    First published
    2026-10-28 23:28 UTC
    Listing
    JPCERT/CC confirmed it 2026-08-13 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 23:41 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 21:28 UTC to 2027-01-26 21:28 UTC
    Logged 2026-10-28 22:27 UTC in IPng Networks Halloumi2027h1, entry 293,771,165
    SHA-256 8a2e40745d30d52ec7fb54d86376295ebf0d463613854e687b29764aa026a4cc
    Public key SHA-256 dd9b769663e4f185017df77f7f21b73e086239ab3a0ea26ae1f4b4053fd31b4a
    Brand
    Yamato Transport
    Addresses
    104.21.41.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.41.195, 172.67.166.213): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    711bdur.bond
    Registered
    2026-07-11 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Receives mail at route2.mx.cloudflare.net, route1.mx.cloudflare.net, route3.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  7. 79iand-fifa.icu US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by JPCERT/CC as imitating ヤマト運輸MX absentSPF missingDMARC policy noneRegistered 4 mo ago
    DetailsHide
    Hostname
    79iand-fifa.icu
    First seen
    2026-10-28 11:21 UTC
    First published
    2026-10-28 11:58 UTC
    Listing
    JPCERT/CC confirmed it 2026-08-06 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-04 12:09 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-28 10:17 UTC to 2027-01-26 10:17 UTC
    Logged 2026-10-28 11:16 UTC in Google PlumbersArms2027h1, entry 488,000,772
    SHA-256 85ceb4c2608dbf2739ee28e91204904c65f979225a1b4ab62c9bc8bebd881bbf
    Public key SHA-256 5a03537720fb0a30febb2b024c3d79c837ef46d1976dcca08e8a859fdf2d973b
    Brand
    Yamato Transport
    Addresses
    104.21.1.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.1.30, 172.67.151.230): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    79iand-fifa.icu
    Registered
    2026-07-07 · Chengdu West Dimension Digital Technology Co., Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  8. yamato-ja.net CN · AS132203 · Tencent Building, Kejizhong…
    ListedTencent CloudListed by JPCERT/CC as imitating ヤマト運輸MX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    yamato-ja.net
    First seen
    2026-10-27 14:05 UTC
    Listing
    JPCERT/CC confirmed it 2026-09-03 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 02:09 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Listed
    JPCERT/CC
    1. Confirmed by JPCERT/CC
    2. We matched the new listing
    3. Certificate logged in CT
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-01 00:00 UTC to 2027-01-28 13:00 UTC
    Logged 2026-11-01 16:29 UTC in Let's Encrypt Willow2027h1, entry 882,443,810
    SHA-256 668b132959e494f0675ad5f4acdd8df08f7c3fc668e990d4a27e78ede9f3c958
    Public key SHA-256 2de5e6d1a9fe0ff97f034a6e4f7530ec9f953b5fe2c970ee6c3f03a197e2a85a
    Brand
    Yamato Transport
    Addresses
    43.165.7.215 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.165.7.215): a cloud provider. It rents servers and addresses to its customers.
    Domain
    yamato-ja.net
    Registered
    2026-08-13 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:35 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Yamato Transport when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Postal & parcel

All brands →